Static task
static1
Behavioral task
behavioral1
Sample
ea9f1fb80090d8e47af328eb5a7b7cdd3a057bfa8db48afa3cac3fb3f3854537.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea9f1fb80090d8e47af328eb5a7b7cdd3a057bfa8db48afa3cac3fb3f3854537.exe
Resource
win10v2004-20220812-en
General
-
Target
ea9f1fb80090d8e47af328eb5a7b7cdd3a057bfa8db48afa3cac3fb3f3854537
-
Size
295KB
-
MD5
326ce2504ff45109d18509102b0f07a2
-
SHA1
9787ab410c8b0881a47d388316868a442ae7a3fe
-
SHA256
ea9f1fb80090d8e47af328eb5a7b7cdd3a057bfa8db48afa3cac3fb3f3854537
-
SHA512
97a4ac6a6261e2c9d88da32bed1c1723b5a77cca3e447d6514a01b9ce5a5e354c67e285200f3f6c25dc36c44c9dc6be8cf057a2cecb23a39c7ebe97405706f1b
-
SSDEEP
6144:XFOXUAadJYiso0/pitBvvmpsmwRog2ZBG1ScCGp3Fkh4:XAXU/neo0/pitBmpsmwR4ZB4CGp3Fk
Malware Config
Signatures
Files
-
ea9f1fb80090d8e47af328eb5a7b7cdd3a057bfa8db48afa3cac3fb3f3854537.exe windows x86
91859493ea65611e96103b3a4ed83742
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoReleaseMarshalData
CoRevokeClassObject
CoCreateGuid
StgOpenStorage
CoCreateInstanceEx
CLSIDFromProgID
shlwapi
SHGetValueA
SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA
SHStrDupA
PathIsContentTypeA
PathGetCharTypeA
user32
CallNextHookEx
BeginPaint
AdjustWindowRectEx
version
VerQueryValueA
VerFindFileA
advapi32
RegCreateKeyExA
shell32
SHGetFolderPathA
SHGetDesktopFolder
comctl32
ImageList_Destroy
ImageList_Read
ImageList_Add
ImageList_DragShowNolock
msvcrt
calloc
memcmp
pow
kernel32
InitializeCriticalSection
CloseHandle
lstrlenA
GetCommandLineW
EnterCriticalSection
LoadLibraryExA
lstrlenW
LockResource
IsBadHugeReadPtr
GetVersionExA
ExitProcess
GetVersion
ExitThread
LocalReAlloc
GetSystemDefaultLangID
DeleteCriticalSection
GetProcAddress
GetCommandLineA
GetACP
WriteFile
VirtualAlloc
SetThreadLocale
LoadLibraryA
HeapDestroy
Sleep
GetModuleHandleA
GetTickCount
GetLastError
FindClose
LocalAlloc
GetCurrentProcess
Sections
CODE Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 512B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ